Azure Machine Learning SSRF
Published Mon, Jun 17th, 2024
Platforms
Summary
Certain API endpoints on ml.azure.com and ai.azure.com used for adding/viewing data connections could be leveraged for server side request forgeries (SSRF). While they do have protections to restrict making requests to internal hosts, it was possible to circumvent those protections using a 301 or 302 redirect response which points to a sensitive host.
Affected Services
Azure Machine Learning
Remediation
None required.
Tracked CVEs
No tracked CVEs
References
Entry Status
Stub
Disclosure Date
-
Exploitability Period
-
Known ITW Exploitation
-
Detection Methods
None
Piercing Index Rating
-
Discovered by
Tenable, Wiz
